Public endpoint used during onboarding to validate that a user’s website is a Shopify store we can support. This prevents non-Shopify stores from signing up.
This is a public endpoint - no authentication required. Rate limited to 5 requests/minute per IP.
The endpoint checks if the domain has an accessible /products.json endpoint, which is a Shopify-specific API that every standard Shopify store exposes.Why /products.json?
Every Shopify store has this endpoint
Returns 200 for Shopify stores, 404 for non-Shopify sites
If blocked (403), the store is using a headless setup we can’t support